| | | 20,000+ Fresh Resumes Monthly | |
|
|
| |
Click here or scroll down to respond to this candidate summaryI am a dynamic technology leader with a proven track record of driving innovation across Cybersecurity, DevOps, SysOps, and Generative AI. With an RQF Level 6 Diploma in Artificial Intelligence Operations and active involvement in AIOps, I am well-versed in the integration of cutting-edge technologies into complex business ecosystems. Currently advancing my knowledge with a forthcoming MSc in AI from the prestigious London School of Economics (remote, Street Address ), I bring deep expertise in scalable cloud architectures, advanced security practices, and the orchestration of AI-driven solutions.Throughout my career, I have specialized in designing resilient infrastructures, refining automation processes, and delivering robust cybersecurity frameworks. My approach harmonizes people, processes, and technology to accelerate digital transformation, with a focus on optimizing cloud-based platforms and harnessing the power of Generative AI to unlock operational excellence.With a strong focus on Offensive Security, Artificial Intelligence, and emerging technologies, I remain committed to shaping the future of enterprise infrastructure and evolving the DevOps and SysOps paradigms for maximum organizational impact.Education Diploma in Artificial Intelligence Ops RQF Level 6 (Street Address Credits) Jan 2023 till December 2024.Diploma in Artificial Intelligence Operations from EduQual RQF Level 6.
I secured a distinction in EduQual Level 6 diploma from UK Govt Regulatory Authority EduQual. I Secured the highest number in my batch in Cyber Security, Offensive Security, Cloud Security, DevOps, SysOps, DevSecOps, and Artificial Intelligence. The diploma has 360 credits which now offers me an opportunity to pursue my MSc from University of London Remote degree program for MSc from London School of Economics.
Certifications Certified information system security professional (CISSP) prep completed, exam schedule for March 2025 Kubernetes and Cloud Native Associate (KCNA) - Prep completed, Exam Scheduled for December 2024 Certified Kubernetes Application Developer (CKAD) - Prep completed, Exam Scheduled for Jan 2025 Certified Kubernetes Security Specialist (CKS) Prep completed, Exam Scheduled for March 2025 Certified Kubernetes Administrator (CKA) Prep completed, Exam Scheduled for June 2025Work historyAl Nafi Cloud Services.DevOps and Security Engineer, Cyber and Cloud Global Core Team
5th Jan 2022 till date
Administered and supported both on-premise and cloud-based environments to ensure optimal performance, scalability, and security. Executed code-based CI/CD deployment plans for new and existing infrastructure following industry standards, best practices, and security guidelines (PCI DSS, ISO 27001, SOC 2). Automated deployments using Git-based repositories, ensuring scalability, security, and ease of maintenance across environments. Managed MySQL databases, overseeing replication, load balancing, obfuscation, backup, and restore operations with a focus on data security and encryption best practices. Troubleshot complex issues across all levels of the stack, providing effective solutions, feedback, and cyber threat remediation to improve system resilience. Developed and implemented repeatable processes for deployment, database backup, and replication, improving reliability and disaster recovery readiness. Collaborated with InfoSec, NetworkOps, and GRC teams to integrate security, compliance, and network requirements into infrastructure deployment and operational plans. Monitored and optimized infrastructure and database health, resolving configuration, performance, and security issues independently while aligning with governance frameworks. Managed users, permissions, and access controls to ensure adherence to best practices, including implementing least-privilege access and security policies across systems. Coordinated patching, upgrading, and maintenance schedules to maintain infrastructure security, stability, and compliance with regulatory standards. Worked with external vendors, league partners, and offensive security teams to ensure deliverables met security and operational requirements, including penetration testing feedback. Developed monitoring solutions to increase visibility into the performance, reliability, and security of both cloud and on-prem environments, leveraging AIOps for predictive analysis. Actively contributed to the overall DevOps and SysOps team objectives, supporting fellow team members with a focus on AI-driven operational efficiency and automation. Integrated PCI DSS, ISO 27001, SOC 2, and offensive security requirements into infrastructure and operational processes to ensure compliance and proactive defense mechanisms. Developed security controls for cloud and container environments, focusing on encryption, logging, monitoring, network segmentation, and AI-powered threat detection solutions. Created and maintained disaster recovery, business continuity, and governance strategies to meet compliance requirements, mitigate risks, and ensure service resilience. Expertise in Kubernetes cluster setup, administration, and troubleshooting with security hardening to protect against common container vulnerabilities. Managed Kubernetes services, ingress, and networking configurations, ensuring secure communication channels between services. Efficient resource management, including handling resource limits, requests, and auto-scaling workloads while integrating AI-driven scaling algorithms for operational optimization. Scheduled, logged, monitored, and load-balanced workloads within Kubernetes environments, ensuring security and compliance were maintained across the cluster. Developed and deployed Kubernetes applications using best practices, while integrating security measures, multi-container pods, readiness and liveness probes, and AI-based observability tools. Experience in working with ConfigMaps, Secrets, Persistent Volumes, and Persistent Volume Claims, maintaining encryption and security across critical application data. Proficiency in multi-container pods, readiness and liveness probes, and application configuration, ensuring seamless operations with built-in security measures. Managed application scaling, rolling updates, and rollback mechanisms in Kubernetes environments with security-first approaches and AI-driven insights for scaling decisions. Security-focused experience in hardening Kubernetes clusters and containerized applications, ensuring systems were resilient against evolving cyber threats. Implementation of security policies using PodSecurityPolicies, NetworkPolicies, and AppArmor to protect against privilege escalation and unauthorized access attempts. Applied best practices for handling secrets, auditing, logging, and encryption in Kubernetes, ensuring compliance with GRC frameworks and security standards. Conducted vulnerability scans, container image security audits, and maintained secure cluster communication, integrating AI and LLMs to assist in detecting threats and providing automated remediation recommendations. Infused AIOps and LLMs into the operational processes, allowing for real-time AI-powered monitoring, predictive maintenance, and intelligent automation of complex tasks across environments.TECHNICAL SKILLSCore CompetenciesOffensive Security: Expertise in advanced penetration testing, vulnerability assessments, and red team operations to proactively identify and mitigate security risks. Skilled in ethical hacking and exploitation techniques using industry-standard tools to simulate real-world threats.Digital Forensics: Proficient in conducting thorough forensic investigations, gathering and preserving digital evidence in compliance with legal standards. Experienced in malware analysis, incident response, and threat hunting to trace the origins of breaches and system intrusions.Governance, Risk, and Compliance (GRC): Strong command of implementing and managing GRC frameworks to ensure organizational alignment with regulatory and security standards. Adept at developing risk management strategies, auditing processes, and compliance programs to maintain enterprise security posture.Cybersecurity Standards and Frameworks: Comprehensive knowledge of leading security frameworks such as NIST, ISO 27001, and CIS Controls, ensuring adherence to best practices across security protocols. Expertise in implementing security measures to meet GDPR, HIPAA, and PCI-DSS requirements, enhancing compliance and data protection efforts.DevOps & SysOps: Extensive experience in automating infrastructure provisioning, CI/CD pipelines, and configuration management using tools like Jenkins, Docker, Kubernetes, and Terraform. Skilled in optimizing cloud environments, managing microservices, and ensuring system reliability and scalability in AWS, Azure, and GCP.Artificial Intelligence & AIOps: Proficient in leveraging AI and machine learning techniques to enhance operational efficiencies, automate anomaly detection, and optimize incident response. Specialized in integrating AIOps to streamline IT operations, reduce downtime, and improve proactive monitoring and alerting.Cloud Security: In-depth understanding of securing cloud platforms, implementing identity and access management (IAM), encryption, and multi-factor authentication (MFA) for cloud-based infrastructures. Expertise in mitigating cloud-native threats, ensuring secure deployment in AWS, Azure, and Google Cloud environments.References:Available on request |
